$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: VCOGQ7z1RGaLpGVRdn3mB1oqHbw1JXH6SGp8LLu3yi0= Subject key identifier: 46:E2:63:DD:04:68:D2:0A:81:6E:7C:1F:27:51:13:E8:52:B4:85:62 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019E1EDA1CB7C467769D3DEA9F2B17033323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1935 Signing time: Wed 13 May 2026 01:01:11 +0000 Manifest this update: Wed 13 May 2026 01:01:11 +0000 Manifest next update: Thu 14 May 2026 01:01:11 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: Qu1Mc8WQ6eeAPH9uUS6S5I-qTeo.roa (hash: VfijZBef7xJk1wzgvIwnq71YHQKXU+yJECoJTQRx0kE=) 13: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 14: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 15: X592uwt05oAZ6VZIQO9SpZfw_gI.roa (hash: 0RauDiHKBdaL0HxQQv2plSQtZnF5VRoiRUDqPfG3Cqs=) 16: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: 0F6rd83ENW4s4hFCLSFBySAfgxA8ARMtEj5fF5zN4uk=) 17: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 18: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1e:da:1c:b7:c4:67:76:9d:3d:ea:9f:2b:17:03:33:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: May 13 01:01:11 2026 GMT Not After : May 14 01:01:11 2026 GMT Subject: CN=46e263dd0468d20a816e7c1f275113e852b48562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:dc:88:75:69:1c:a0:93:1c:d2:b4:ba:ab: 3c:68:ed:11:af:12:9a:c5:96:a4:2c:fe:34:ae:7c: c4:29:0c:58:fe:66:90:af:5b:35:a0:74:24:58:cf: 84:df:5a:e7:5b:e4:6d:02:a4:c9:8b:6c:c8:22:c2: a6:3d:e8:12:1d:93:ba:8d:dc:76:76:30:be:bf:81: 1a:1f:ed:5c:d9:54:28:b2:bf:7b:1e:56:a3:b2:20: d8:f0:07:bf:b3:0d:91:92:4c:b7:81:a7:ef:0c:91: 35:9c:0f:0e:4a:77:df:d3:6e:47:d1:f8:12:02:d7: 16:b0:f8:a3:94:f5:28:41:c5:bd:7c:0e:17:e1:54: 0f:13:ae:2e:77:dd:a7:40:ac:58:d1:ee:cf:f4:97: 56:7c:25:f8:38:45:8a:50:9e:ce:c2:18:12:60:80: ad:53:c8:bc:50:f3:24:47:e4:58:1a:48:c9:ef:43: 0b:33:3f:6a:4c:59:f7:d3:fc:50:d8:1b:b4:3a:e3: fb:ac:84:c3:09:ce:19:84:aa:77:6b:b4:25:b4:e6: ef:15:a7:e6:6e:20:95:84:5a:ef:89:f1:60:af:6c: 18:eb:3a:9e:7a:36:3c:51:e5:29:00:ba:f7:97:51: 10:cf:27:bf:c3:36:91:7c:b7:e3:ef:5c:f6:76:36: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E2:63:DD:04:68:D2:0A:81:6E:7C:1F:27:51:13:E8:52:B4:85:62 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6c:b7:e9:6f:e4:3d:f3:92:b4:3a:59:8d:05:55:68:13:1e: 66:ea:4d:47:1c:f7:fa:02:3e:41:a7:6f:f5:84:4d:ff:bb:59: 09:eb:ab:9a:47:00:30:fc:d6:ea:1e:a5:14:ca:4f:04:93:eb: 8b:25:fe:16:dd:96:12:aa:38:51:9d:c2:99:fb:b9:e0:6b:a2: 44:91:99:7f:2a:84:0c:6a:83:4f:0a:52:7b:2c:9a:42:12:a6: 17:0c:d3:cf:9d:c7:02:dd:be:6a:12:7e:6c:8a:cf:d7:8b:55: 68:74:f3:87:cb:d4:7b:18:27:b6:e6:94:6d:4c:d9:10:55:a3: a0:a9:0a:21:2c:12:c0:48:4f:cc:2b:ee:49:12:99:02:ab:7c: 17:bb:a6:7e:e2:78:59:da:d4:80:5f:ed:e9:42:40:76:5d:cc: 90:3b:88:7b:42:6a:9d:6d:fd:30:fc:8d:35:bc:ce:0d:a4:da: e6:28:76:b4:ee:95:17:1c:4a:d9:1c:9f:c6:84:ee:1c:20:e4: 3e:03:c5:79:03:bc:09:0c:e1:d0:c1:6f:f7:6d:60:ab:61:56: 67:7f:00:5c:43:9e:b8:9a:e4:ac:64:74:fc:24:ca:02:10:9e: b9:d8:01:fd:2c:8a:e0:be:04:b0:08:82:1f:10:ca:cf:79:2b: 15:e6:88:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4e2hy3xGd2nT3qnysXAzMjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwNTEzMDEwMTExWhcNMjYwNTE0MDEwMTExWjAzMTEwLwYDVQQD Eyg0NmUyNjNkZDA0NjhkMjBhODE2ZTdjMWYyNzUxMTNlODUyYjQ4NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcjciHVpHKCTHNK0uqs8aO0RrxKa xZakLP40rnzEKQxY/maQr1s1oHQkWM+E31rnW+RtAqTJi2zIIsKmPegSHZO6jdx2 djC+v4EaH+1c2VQosr97HlajsiDY8Ae/sw2Rkky3gafvDJE1nA8OSnff025H0fgS AtcWsPijlPUoQcW9fA4X4VQPE64ud92nQKxY0e7P9JdWfCX4OEWKUJ7OwhgSYICt U8i8UPMkR+RYGkjJ70MLMz9qTFn30/xQ2Bu0OuP7rITDCc4ZhKp3a7QltObvFafm biCVhFrvifFgr2wY6zqeejY8UeUpALr3l1EQzye/wzaRfLfj71z2djajAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbiY90EaNIKgW58HydRE+hStIViMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2y36W/k PfOStDpZjQVVaBMeZupNRxz3+gI+Qadv9YRN/7tZCeurmkcAMPzW6h6lFMpPBJPr iyX+Ft2WEqo4UZ3Cmfu54GuiRJGZfyqEDGqDTwpSeyyaQhKmFwzTz53HAt2+ahJ+ bIrP14tVaHTzh8vUexgntuaUbUzZEFWjoKkKISwSwEhPzCvuSRKZAqt8F7umfuJ4 WdrUgF/t6UJAdl3MkDuIe0JqnW39MPyNNbzODaTa5ih2tO6VFxxK2RyfxoTuHCDk PgPFeQO8CQzh0MFv921gq2FWZ38AXEOeuJrkrGR0/CTKAhCeudgB/SyK4L4EsAiC HxDKz3krFeaI5Q== -----END CERTIFICATE-----Generated at Wed May 13 04:05:55 2026 by rpki-client